What Is the WPS Button on a Router?
WPS lets you connect devices to WiFi by pressing a button instead of typing a password. It's convenient but has a known security flaw — here's how it works and why most guides recommend turning it off.
What WPS stands for and what it does
WPS stands for Wi-Fi Protected Setup. It's a standard designed to make connecting devices to your WiFi network easier — without typing the password. When you press the WPS button on your router, it opens a 2-minute window during which nearby devices can join the network with a button press or PIN, instead of entering the password.
WPS was introduced in 2006 to simplify connecting printers, cameras, and smart home devices to WiFi. It works in three modes:
- Push-Button (PBC): Press WPS on the router, then press WPS (or a WiFi connect button) on the device within 2 minutes. They connect automatically.
- PIN method: Enter an 8-digit PIN from the router label into the device's setup screen — or vice versa. Less common for consumers.
- NFC (rare): Tap an NFC-enabled device to the router. Almost never used.
How to use the WPS button
- Press the WPS button on your router. It's usually labelled "WPS" and may have the WPS symbol (two curved arrows forming a circle). The WPS LED on the router starts blinking.
- Within 2 minutes, on the device you want to connect:
- Printer: Press the WiFi or WPS button on the printer (check the printer's manual)
- Smart home device: Follow the device's app setup — many have a "Press WPS on your router" step
- Windows PC: Click the WiFi network in the taskbar → click Connect → Windows may prompt "Press the WPS button on your router"
- Android: Settings → WiFi → tap your network → tap the WPS button option (available on some Android versions)
- The devices negotiate and connect. The WPS LED goes solid when complete.
Why you should disable WPS
The WPS PIN method has a known security vulnerability discovered in 2011. The 8-digit PIN is validated in two 4-digit halves, which reduces the effective combinations from 100 million to about 11,000 — making brute-force attacks feasible within hours using tools like Reaver.
Even if your router uses Push-Button only (not PIN), the WPS standard is old and not all implementations are secure. Most security guides recommend disabling WPS entirely:
- Log in to your router admin panel (192.168.1.1 or your gateway IP)
- Find WPS settings under Wireless or Advanced Security
- Disable WPS. Save.
The convenience cost is minimal — you'll type your WiFi password once per device instead of pressing a button. The security benefit is removing a known attack surface.
Devices that commonly use WPS
- Wireless printers (HP, Canon, Epson)
- WiFi extenders and mesh satellite nodes (during initial setup)
- Smart home hubs (some older models)
- IP cameras and baby monitors
- Smart TVs (older models — newer ones use app-based setup)
Most modern devices (2020+) have moved away from WPS toward app-based setup flows (scanning a QR code, or using Bluetooth for initial pairing). If a device requires WPS, enable it temporarily, connect the device, then disable WPS again.
Related Guides
Share WiFi Password
Modern password-sharing methods that don't have WPS's security issues.
Secure Your Home Network
Full security checklist including WPS and router hardening.
What Is a Firewall
Other router security settings worth understanding.
Change WiFi Password
If WPS was compromised, change your password immediately.
More From This Section
All Router Guides
Login, setup, and troubleshooting for every router brand.
How to Restart Your Router
The proper restart sequence and why it helps.
Update Router Firmware
Why firmware updates matter and how to apply them safely.
Change Router Admin Password
Secure your router login on every major brand.